{"repo":"NetDevPack/Security.Jwt","free":true,"listed":false,"github":"https://github.com/NetDevPack/Security.Jwt","clone":"git clone https://github.com/NetDevPack/Security.Jwt.git","description":"Jwt Manager. Set of components to deal with Jwt Stuff. Automate your key rotating, add support for jwks_uri. Store your cryptography keys in a secure place.","language":"C#","stars":296,"topics":["cryptography","ecdsa","jwks","jwt","jwt-authentication","jwt-token","rsa","jwe","jws"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"JWT Key Management for .NET - Generate and auto rotate Cryptographic Keys for your Jwt (jws) / Jwe One of the biggest problem at Key Management is: How to distribute keys in a security way. HMAC relies on sharing the key between many projects. To accomplish it NetDevPack.Security.Jwt use Public Key Cryptosystem to generate your keys. So you can share you public key at https:// /jwks ! Are you creating Jwt like this? Let me tell you: You have a problem. ------------------ The goal of this project is to help your application security by Managing your JWT. Auto create RSA or ECDsa keys Support for JWE Support public jwks uri endpoint with your public key in JWKS format (Support for JWS and JWE) Extensions for your client API's to consume the JWKS endpoint. See more at NetDevack.Security.JwtExtensions Auto rotate key every 90 days (Following NIST Best current practices for Public Key Rotation) Remove old private keys after key rotation (NIST Recommendations) Use recommended settings for RSA & ECDSA (RFC 7518 Recommendations) Uses random number generator to generate keys for JWE with AES CBC (dotnet does not support RSA-OAEP with Aes128GCM) By default Save keys in same room of ASP.NET DataProtection (The same place where ASP.NET save the keys to to cryptograph MVC cookies) It generates Keys way better with RSA and ECDsa algorithms. Which is most recommended by RFC 7518. Token Validation Generating Tokens: Table of Contents ## - JWT Key Management for .NET - Generate and auto rotat","default_branch":null,"files":null,"tree":[],"storefront":"/r/NetDevPack","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/NetDevPack/Security.Jwt/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}